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Cheaters gaming the 
certification system 



BY DAVID WORTHINGTON 

Don't judge a developer based 
on certifications. Cheaters are 
coordinated, and the answers to 
exams are easily located on the 
Web. 

Websites, including cert 
collection.org, examcollection 
.com and (until recently) 
sadikhov.com, host forums 



where members share advice, 
experience, and even actual 
word-for-word Microsoft certi- 
fication test questions known in 
the cheating community as "MS 
brain dumps." 

Would-be cheaters discuss 

tactics to avoid being caught by 

Microsoft and share safe havens 

continued on page 21 ► 



ExamCollection.com Forum Index -> General Discussions 
4shared: Reported Abuse by Microsoft. 

Author: ampdeck Member Posted: Fri. Mar 13, 2009 1:42 pm 

I have uploaded brain dump for 70-290 and 4shared emailed 
me that Microsoft reported abuse my file and they have deleted 
it. I guess Microsoft is tracking down sites thats hosting MS 
Brain dumps. Watch out. ^f 

Author: ampdeck Member Posted: Sat. Mar 14, 2009 4:22 am 

Additional info. Sadikhov is already cleaning up their posts with 
shares and dumps used. I guess micrososft is hunting them 
down and im 100% sure of that. I really hope that this site will 
not be affected by microsoft. 



© 



Author: needvista Permanent Member Posted: Sat. Mar 14, 2009 5:03 am 
this site was shut down 2 times due to reports which is good 



IBM-Sun acquisition 
rumor is still just that 



BY ALEX HANDY 

Could the marriage happen? A 
month after rumors of a US$6.5 
billion IBM buyout of Sun 
Microsystems were printed by 
The Wall Street Journal, both 
parties remain silent. 

Jean Bozman, research vice 
president for enterprise servers 
at IDC, couldn't say if these 
rumors had any basis in truth. 
"Nobody knows where it came 
from," she said, referring to the 
report. "It could even have been 
something along the lines of a tri- 
al balloon to see how people 
would react. IBM is a heavy Java 
user, and has been for a long 
time. There was a time period 



WHAT WOULD BE LEFT 

STANDING AFTER A MERGER? 

PAGE 23 

SUN UNVEILS PLANS FOR 

OPEN CLOUD PLATFORM 
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when IBM had more Java pro- 
grammers than Sun. And Java is 
a unifier in the data center." 

John Rymer, a senior analyst 
at Forrester Research, said that 
Sun CEO Jonathan Schwartz 
had been shopping the company 
around since the downturn in the 
economy began last fall. 

Rymer said that the Sun deal 
could be appealing to IBM for 
many reasons. "[Reason] one is 



Sun's enterprise server business. 
Ground zero is the server busi- 
ness, where I think IBM has 
decided they want to consolidate 
their Unix and Linux business to 
compete with HP," he said. 

"[Second,] IBM has an enor- 
mous amount of software rev- 
enue based on Java, so they 
would have control over that 
technology and control over its 
evolution. I think Solaris is a big 
part of this. Of all the Unixes, 
Solaris is the biggest." 

UBS Research published a 

report on the acquisition after 

the rumors first surfaced. In it, 

the financial services firm indi- 

continued on page 22 ► 



Bottom line: Software had better pay 

In this economy, new projects need to show immediate ROI 



BY JEFF FEINMAN 

Software projects that produce 
immediate business results have 
become the order of the day as 
the continued global recession 
keeps budgets and resources 
tight, according to several soft- 
ware development consultants. 
Additionally, even though many 
companies, such as Intel and 
Microsoft, have been downsizing, 
developers can utilize time with- 
out a day job to learn new tech- 
nologies and create innovative 
software, the consultants said. 
Efforts like supply chain man- 



agement or automation improve- 
ments have continued on through 
the recession, even though many 
other software initiatives may be 
canceled or delayed. If the pay- 
back on a project isn't beneficial 
or if project costs are fuzzy, an 
organization's management is not 
likely to carry it out in this eco- 
nomic environment, according to 
technology consultant and analyst 
Larry O'Brien. 

"Right now, everyone's focused 
on controlling costs and looking 
at that bottom line," said O'Brien, 
who writes the Windows & .NET 



Watch column for SD Times. 
"What's been surprising to me is 
that even companies that have 
been hard hit are continuing 
with projects that have a real 
concrete return on investment. I 
sort of expected to lose a couple 
of clients, but they see those 
types of projects as important to 
the bottom line." 

Not only must a project have 
a definite ROI, that return must 
be immediate. Dave Locke, 
director of marketing for IBM 
Rational, said that one main 
continued on page 17 ► 
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IBM plays a game with training 
page 9 
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Microsotf It takes a team to produce better code on faster timelines, Visual 

V ISU3 1 StU Q 10 Studio" Team System 2003 makes it easier to track work items, update 

everyone, analyze code, and get the job done, from UX to database. 

Team System Download a trial at mkrosoft.com/defyalkhallenges/team 
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Enterprise Open Source Ajax 
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ICEfaces is much more than a component suite. It is an Ajax 
application framework that provides ease of development for 
Java/JSF developers J CEfaces applications are developed 
with minimal design effort in Java/JSf not JavaScript 



ICEfeces pioneered Ajax Push enabling server/application 
initiated content rendering to the browser. With Ajax Push, 
developers can create coJlaborative and dy ramie enterprise 
applications like never before. 



ICESOFT 



TECHNOLOGIES INC, 



easyajaxJcefaces.org 
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'Swordfish/ 'Galileo' grab spotlight at EclipseCon 

OSGi-based ESB r next release train on track for delivery 



BY ALEX HANDY 

Plans for an end-to-end open-source 
SOA stack built atop the newly released 
OSGi-based Swordfish ESB were 
revealed last month at EclipseCon, the 
Eclipse Foundations annual confab. 

Swordfish will swim its way up the 
Eclipse project stream to link up with a 
forthcoming registry and repository pro- 
ject that will first arrive in the Galileo 
release train, coming this summer. 

Dr. Ricco Deutscher, CTO of 
SOA service provider S opera and a 
member of the board of directors 
for the Eclipse Foundation, said, 
"Swordfish is embedded in a larger 
initiative called Eclipse SOA. We 
want to develop a full-fledged enter- 
prise service bus in it. We want to 
integrate systems management and a 
registry repository. As of today, 
there is no enterprise registry 
service repository in open 
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source. Therefore, we plan to MyEclipse commissioned 
initiate a new project in eclipse this bobblehead replica 
to set the de facto standard." of Mike Milinkovich. 

Foundation executive direc- 
tor Mike Milinkovich said things have 
been busy of late. "New projects are com- 
ing into Eclipse at a pretty fast pace. At 
the moment, we have 14 proposals" back- 
logged, he said. 

"I think where we see a lot of the 
future potential for Eclipse is in these 
industry working groups, using Eclipse 
as a process for sharing innovation and 
building industry platforms. Any time 



you talk about companies collaborating 
in any way, you need four things. You 
have to have a licensing and [intellectual 
property] regime, and a governance 
model to make sure it's a level playing 
field. There needs to be a development 
process. And there has to be some form 
of technical architecture. You can get all 
four of those out of the box by coming 
and building collaboration at Eclipse. 
It saves an enormous amount of time 
and money." 

Two months ago, the Eclipse 
Financial Platform proposal was 
accepted. This project seeks to build 
a standardized set of credit and 
finance management tools built on 
top of Eclipse. Milinkovich high- 
lighted this project as an example of 
the interesting vertical market work 
that is coming into Eclipse. 
Another interesting addi- 
tion to the Eclipse platform 
was the move in February to 
bring the Jetty embeddable 
HTTP server under the 
Eclipse Foundations wing. 



This Java-based Web server is now a run- 
time within the Eclipse platform, and 
version 7 will be released with the Galileo 
release train. 

MOBILE FUTURE 

Ten years after OSGi first surfaced, the 
Alliance's initial goals are only now being 
realized. Milinkovich said that OSGi has 
"seen an enormous amount of uptake [in 
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The Swordfish ESB will eventually be joined by a full stack of Eclipse SOA projects. 



OSGi] as the modularity model for the 
[application] servers that are out there. 
The interesting thing, though, is it was 
originally designed to be used in embed- 
ded devices. Now, there are a lot of 
attempts to get it going in mobile." 

Indeed, Jon Bostrom, president of 
MobiNoir Consulting, spoke at Eclipse- 
Con of telecommunications company 
Sprints current efforts to put OSGi onto 
many of its phones. Bostrom said that this 
effort has only recently come to market in 
the form of Sprints lineup of newer 
Motorola phones based on Linux. Using 
OSGi, enterprise developers can quickly 
modify their mobile applications without 
the need to wipe phones completely in 
between software updates. 



Red Hat released a new version of its 
developer tools at EclipseCon. The 
company addressed the growing portfo- 
lio of JBoss software with JBoss Devel- 
oper Studio 2.0 Portfolio Edition. 

Portfolio Edition is available without 
any technical support for US$99 per 
user. Support is available in larger 
chunks along with support for JBoss 
infrastructure, starting at around $3,000 
per year. 

Oracle also released a new version of 
its developer tools, the Enterprise Pack 
for Eclipse Release llg. Oracle's devel- 
opment environment has a somewhat 
wider worldview, thanks to the inclusion 
of object-relational mapping and sup- 
port for the Spring framework. I 



Crash analyzer give testers weapon against exploits 



BY DAVID WORTHINGTON 

As part of its ongoing drive to secure the 
Windows ecosystem, Microsoft is releas- 
ing an automation tool that it says will 
help testers determine the uniqueness 



of crashes and drill down into whatever 
security implications might exist. 

Microsoft made Exploitable Crash 
Analyzer available for download last 
month at its CodePlex open-source pro- 
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Microsoft's Exploitable Crash Analyzer classifies bugs and finds underlying security holes. 



; 



ject hosting website. The tool has been 
used by Microsoft as part of its Security 
Development Lifecycle process (SDL). 

The SDL is a mandatory process 
used internally at Microsoft as it creates 
software, and Microsoft began sharing 
its SDL expertise and tooling with cus- 
tomers last year. Exploitable Crash Ana- 
lyzer is Microsoft's latest release. 

The tool is a Windows debugger exten- 
sion that is intended for use during the 
fuzz testing process, when testers throw 
unexpected data at applications to see 
how the data is handled, explained Matt 
Thomlinson, senior director of security 
engineering at Microsoft's Security Engi- 
neering Center. The side effect of a crash 
may be a security vulnerability, he said. 

By releasing Exploitable Crash Ana- 
lyzer, Microsoft is standing behind the 
junior tester and enabling him or her to 
tell the senior developer that a security 
vulnerability should be fixed before an 
application ships, said Dan Kaminsky, 
director of penetration testing for IOAc- 
tive, a Seattle-based security consultan- 
cy that contracts with Microsoft. 



"Tools like Exploitable asymmetrical- 
ly benefit the good guys over the bad 
guys. Attackers can look at a crash and 
exploit it, because that is what they do. 
That is not what junior testers and even 
senior developers do," he said. 

The tool combs through crash data to 
uncover common underlying bugs, then 
diagnoses a crash for whatever security 
impact it may have using built-in rules, 
Thomlinson explained. Without tools, 
fuzzing has traditionally required a lot of 
manpower, where 100 different crashes 
could be the same bug manifesting itself 
in 100 different ways, he added. 

"It's very useful for us, and we 
thought that it would be useful to others. 
It's hard to find security experts on your 
staff, and if you can automate your way 
out of that, it's great," Thomlinson said. 

"The grand challenge in security is 
how do we make this scale — getting past 
individual experts and [getting] into 
repeatable workflows," Kaminsky said. 

Microsoft is hoping that the open- 
source community will keep the tool up- 
to-date in terms of security, said Thorn- 
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i NEW PRODUCTS , 



Word processing component provider TX Text Control has created a 
spell-checking component that is geared for ASP.NET applications, 
.NET applications and Windows Forms. RapidSpell .NET gives a 
spell-check dialog with replacement suggestions in English and Ger- 
man dictionaries, according to TX Text Control . . . Salesforce.com 
has integrated with Twitter, allowing users to search and join Twitter 
conversations in Salesforce's Service Cloud customer service offer- 
ing. Salesforce CRM for Twitter lets users create a record in the 
Service Cloud that tracks replies to a post that interests them. Users 
can also connect to Facebook and other social networking sites with 
Salesforce CRM for Twitter, according to the company. 



, UPDATES , 



Data connectivity and mainframe integration company DataDirect 
Technologies has made available DataDirect Connect 6.0, adding 
integration with major platforms and databases, including IBM's 
DB2, Microsoft's SQL Server, Oracle and Sybase. Company execu- 
tives said that DataDirect Connect 6.0 has new load bulk functional- 
ity for loading bulk data into a database through the open database 
connectivity API, and for performing bulk operations without having 
to deploy load software from an outside source . . . Text- retrieval 
software maker dtSearch has increased sample code for use with 
Microsoft Visual Studio in a new version of its dtSearch 64-bit devel- 
oper product line. Version 7.6 of dtSearch's text retrieval software 
includes new features like the Terabyte Indexer, which can search 
terabytes of data in less than a second, and the Spider, which adds 
local or remote website content to a searchable data collection, 
according to the company . . . ActiveState has added new navigation 
capabilities to its Komodo IDE, allowing developers to browse 
through recently edited files. Komodo 5.1 has new hyperlinking 
capabilities and improvements to how developers can access files. 
Additionally, Komodo 5.1 integrates with the Linux platform, accord- 
ing to company executives . . . Application management company 
Micro Focus released Liant 12, a new version of its application devel- 
opment suite. Liant 12 includes larger capacity and improved 
capability with Windows for its RM/COBOL compiler and runtime 
system, according to Micro Focus . . . SOA software company Fiora- 
no improved Java Message Service (JMS) messaging in its MQ mes- 
saging platform. Company executives claim that MQ 9 brings JMS 
closer to real time than any other JMS platform, as it reduces laten- 
cy to between 5 and 40 milliseconds. Additionally, MQ9 boosts peak 
performance to more than 40,000 messages per second for pub- 
lish/subscribe messaging, the company said . . . CollabNet has 
released Subversion 1.6, adding the ability to detect potential 
issues when users update or merge code. These "tree conflicts" 
must be resolved before changes are committed so that no problems 
are overlooked, according to CollabNet. Subversion 1.6 also provides 
administrators more options for managing authentication data, and 
it integrates with the K Desktop Environment's KWallet password 
management application . . . Novell released SUSE Linux Enter- 
prise 11, offering two new extensions: the Enterprise Mono exten- 
sion, which allows users to run .NET-based applications on Linux, and 
the Enterprise High Availability extension, a clustering product 
aimed at improving an application's uptime. Novell also released 
ZENWorks Linux Management 7.3, which the company said enables 
policy-driven automation for SUSE Linux Enterprise 11. 



, PEOPLE , 



Tony de la Lama has been named Embarcadero's senior vice presi- 
dent of research and development. De la Lama previously served in 
executive positions at BEA Systems, Borland and CollabNet. With 
Borland, he was vice president and general manager of Borland's 
Together business unit. He held the positions of vice president and 
general manager of WebLogic Integration with BEA Systems, and 
vice president of worldwide marketing with CollabNet. I 



Silverlight 3 raises question: 
Is there still a need for WPF? 



BY DAVID WORTHINGTON 

Silverlight is encroaching on 
Windows Presentation Founda- 
tion's turf, as the distinction 
between the two Microsoft tech- 
nologies is eroding. This raises 
the question: Do Microsoft and 
its customers still need WPF? 

That question is posed by 
Forrester Research principal 
analyst Jeffrey Hammond. His 
comments were sparked by 
Microsoft's recent announce- 
ment that Silverlight 3 will have 
advanced multimedia features 
and will run outside of the 
browser. Silverlight 3 would 
have limited access to desktop 
hardware, Windows and the 
Windows file store. It also will 
provide hardware-accelerated 
graphics and 3D effects. 

"Rich client applications 
(using WPF) are likely to 
become an edge case as more 
and more developers build 
RIAs and as RIAs get more 
capable," said Hammond. "Sil- 
verlight and AIR absolutely 
accelerate this process as they 
eat away at the distinct feature 
set that WPF has with add-ons 
like GPU acceleration and out- 
of-browser operation." 

"Why should anyone even 
begin a new WPF business app 
now when they can spend the 
time creating the same app in 
Silverlight, running in the brows- 
er and on the desktop?" asked 
Developer Express CTO Julian 
Bucknall. 



WHICH TECHNOLOGY DO I NEED? 



WPF is your best choice if your application needs: 

• device, system and file access 

• 3D, visual effects or is graphics intensive 

• desktop Ul controls 

• print layout text 

• to use more of .NET 

Silverlight is your best choice if your application needs: 

• to work anywhere 

• to work on a mobile device 

• to use new advertising capabilities such as Deep Zoom 

• to grow your investment from Web to device and desktop 

Source: Brad Becker, group product manager for user experience and tools at Microsoft. 



Brad Becker, Microsoft's 
group product manager for user 
experience and tools, said that 
Microsoft continues to invest in 
WPF. He highlighted the new 
WPF capabilities that will be 
introduced in .NET 4.0, such as 
support for multi-touch applica- 
tions in Windows 7, updated 
APIs for accessing underlying 
media, better graphic perfor- 
mance, and text display tweaks, 
as well as business-oriented con- 
trols and a new data grid that is 
shared with Silverlight. 

Becker explained that in 
comparison to Silverlight appli- 
cations, which can "run any- 
where" without installing on the 
client machine, WPF applica- 
tions can "fully utilize the capa- 
bilities of your PC, such as 
hardware-accelerated graphics, 
and the Windows operating sys- 
tem for desktop, file and system 
integration." 



Both technologies share a 
consistent API and controls, 
and they use XAML for build- 
ing applications, he added. 

"The only thing [differenti- 
ating WPF] I can come up 
with at the moment is that 
WPF has a richer runtime. 
And... well, that's it," Bucknall 
wrote. He added that Sil- 
verlight 3 also introduces a 
data access layer that is based 
on Microsoft's ADO.NET 
Entity Framework. 

"Silverlight is in a fight 
against [Adobe] Flash for the 
mindshare of media/RIA devel- 
opers, but I'm seeing WPF as 
collateral damage," Bucknall 
concluded. 

Regardless, Forrester's Ham- 
mond sees the benefits of 
Microsoft pushing Silverlight 
instead of WPF. "If Silverlight 
wins, .NET wins, even if it is 
cross-platform," he said. I 



SILVERLIGHT IS MAIN EVENT AT MIX09 



BY DAVID WORTHINGTON 

Silverlight took the spotlight at 
Microsoft's MIX09 conference 
last month. Other technologies 
highlighted during the confer- 
ence included updates to the 
Expression line of development 
tools, Internet Explorer 8, and 
Windows Azure. 

The March 18 keynote, head- 
lined by Bill Buxton, principal 
researcher at Microsoft Re- 
search, and Scott Guthrie, cor- 
porate vice president of Micro- 
soft's .NET Developer Division, 
was primarily used to announce 
the availability of a developers' 
build of Silverlight 3. 

Silverlight 3 is capable of run- 
ning outside the browser on Mac 
OS X and Windows, with limited 



access to desktop hardware, the 
host operating system and Win- 
dows file store. It also has hard- 
ware-accelerated graphics and 
3D effects. Eclipse-based tool- 
ing is available for Mac users. 

Version 3 of Microsoft's pre- 
ferred development suite for 
Silverlight, Expression Blend, 
was also announced at MIX. It 
includes a new workflow 
between developers and cus- 
tomers, and it automatically 
creates project documentation. 

Other changes include the 
addition of new prototyping 
capabilities, as well as code 
completion for C# and XAML 
programming. 

A beta of Expression Web 3, 
Microsoft's Web design tool, 



was also announced. It has a 
page preview feature that 
allows a Web developer to test 
Internet Explorer 6, 7 and 8 on 
a single computer without 
needing a virtual machine. The 
previewer also has expanded 
CSS diagnostics. 

Windows Azure shared the 
spotlight, with Guthrie announc- 
ing that it will have broader 
developer-facing features than 
previously announced. 

Windows Azure will have 
compatibility with ASP.NET 
full-trust applications, FastCGI 
specification support for PHP 
development, and .NET ser- 
vices, as well as access to rela- 
tional data stored in SQL Data 
Services. I 
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Black Duck moves into enterprise suite 



Black Duck Suite Architecture 



BY DAVID RUBINSTEIN 

Moving to provide more enter- 
prise-type capabilities to devel- 
opment teams, Black Duck Soft- 
ware, in a matter of "days to 
weeks," will release its first suite 
of tools that facilitate the use of 
open-source and other compo- 
nents in software projects. 

Called simply the Black 
Duck Suite, it is made up of the 
company's Protex, Code Center 
and Export products, along 



with the search functionality 
gained from the company's 
acquisition of Koders, all sitting 
atop the Black Duck Knowl- 
edgeBase catalog of more than 
200,000 open-source projects. 

Protex controls how soft- 
ware assets are introduced into 
a development project to 
ensure that licenses or gover- 
nance policies are not being 
violated; Code Center is a cata- 
log of reusable components; 



and Export provides encryp- 
tion compliance management. 
Koders is a search engine that 
has been called "Google for 
code" that developers can use 
to locate specific pieces of code 
within the catalog. 

The result enables develop- 
ment teams to search and select 
components, check them for 
security or licensing issues, dri- 
ve the approval process, and 
catalog them for use and reuse, 



GNU Automake is leader of reuse survey 



BY ALEX HANDY 

For a survey of open-source 
code reuse, Black Duck Soft- 
ware dug deeper than normal. 
The company looked at the 
redistribution of binary compo- 
nents in open-source projects, 
and it found that GNU 
Automake is the most widely 
reused open-source component. 
Of the 1,311 open-source 
projects included in the survey, 
Black Duck found over 365,000 
instances of reuse in the wild. 
That means that over 365,000 
other projects have redistributed 



binary assets from the core 
1,311. The survey focused only 
on projects in which binary 
assets are redistributed as part of 
a downloadable application bun- 
dle, ignoring software that used 
actual snippets of open-source 
code in the application body. 

GNU Automake appeared in 
12,469 other projects, according 
to Black Duck. Arriving at a dis- 
tant second with just over 6,000 
instances was GNU Autoconf. 
This was somewhat odd, howev- 
er, as GNU Automake requires 
GNU Autoconf. No explanation 
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was given by Black Duck for this 
discrepancy. I 



according to product manage- 
ment vice president Jim Berets. 
Finally, the suite also enables 
ongoing validation and moni- 
toring after the components are 
deployed. 

The suite is not only for 
open-source components; it 
will allow organizations to look 
at their own components, to 
track what's being used and 
where, and to enforce policies 
regarding the use of those com- 
ponents, Berets added. "We 
want to make it easy for devel- 
opers to use open source within 
their organization and to enable 
a multi-source development 
environment," he said. 

The suite also includes an 
SDK that developers can use to 
build the Black Duck tools into 
their SCM systems or IDEs, 
Berets said. 

The idea behind the suite 
was to take Black Duck's broad 
knowledge of open source and 
open-source components and 
"bring it upstream into the 
development process," said Tim 
Yeaton, the company's new 
president and CEO. Yeaton 



Ul Framework 


SDK 


Protex 


Code 
Center 


Export 


Core & Application 
Frameworks 


KnowledgeBase 






Source: Black Duck 



joined the company in early 
February, taking the position 
vacated by founder Doug 
Levin. Previously, Yeaton had 
worked at Red Hat, and he was 
one of the drivers behind that 
company's move into the devel- 
opment market with the acqui- 
sition of JBoss and a partner- 
ship with Exadel. 

"The componentization of 
application development is an 
inexorable march," Yeaton said. 
"And the strong adoption of 
agile methods and iterative 
development has created a 
greater need for integration." 

Yeaton said that Black Duck 
showed year-over-year growth 
of 42% at the end of 2008, and 
it also raised US$9.5 million in 
investment funding to get "the 
power we need to power 
through this recession." I 
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IBM plays a game with training 

lnnov8 simulates supply-chain issues to break employees into BPM 



BY ALEX HANDY 

The annual Game Developers 
Conference is, perhaps, not the 
place you'd expect to find IBM 
discussing business process 
management. But the company 
does have games to play. A year 
and a half ago, IBM released a 
game about BPM and sent 
copies off to MBA schools 
around the country. The project 
was so successful that version 
2.0 will be arriving in May, 
opening the world of BPM to 
an audience outside of the 
classroom. 

Phaedra Boinodiris, serious 
games product manager for the 
IBM software group, said that 
the BPM training game, 
Innov8 1.0, focused on teach- 
ing business students about the 
potential of BPM. Her work is 
part of a growing marketplace 
where videogames are being 
created to train workers and 
students. 

"What it really did was teach 
the A-to-Z of business process 
management," said Boinodiris 



"You played as a consultant 
dropped into this a virtual com- 
pany. The CEO is telling you 
that you have to figure out how 
to solve problems with the busi- 
ness flow" 

Despite its presentation as a 
first-person shooter, Innov8 1.0 
was not action-packed. Players 
negotiated an office environ- 
ment and spoke to various 
employees to determine the 
needs of the business. 

Boinodiris said that version 
2.0 will be less focused on the 
white-collar world. "We're 
infusing it with a massive 
amount of new content based 
on our Smarter Planet initia- 
tive, showing how our IT solu- 
tions across the board solve 
infrastructure problems," she 
said, adding that it showcases 
"how people can use IT solu- 
tions to solve traffic flows, cre- 
ate smarter supply chains and 
provide smarter customer ser- 
vice. How can you leverage 
BPM and leverage SOA to low- 
er the amount of environmental 




lnnov8 2.0, arriving in May, will focus more on BPM problems involving 
infrastructure and supply chains, said developer Phaedra Boinodiris. 



impact for you suppliers?" 

Innov8 2.0 will offer three 
scenarios based on these prob- 
lems. For the supply chain 
scenario, players will set up 
business process rules to cre- 
ate an effective and environ- 
mentally friendly sequence of 
suppliers for a hardware store. 
Just before a hurricane hits, 
players running the hardware 



store will set up their business 
rules so that they can adapt 
and change as the situation 
demands. 

Boinodiris and her team are 
based out of IBM's WebSphere 
software group, so the game will 
also be a marketing tool for 
IBM's SOA stack. But she was 
quick to point out that the new 
game will not be a training sim- 



ulator for IBM's WebSphere 
Business modeler. "It's not a 
game that could show you how 
to use the modeler. It shows you 
the power of it," she said. 

SERIOUS BUSINESS 

IBM wasn't the only company 
outside of the video games 
industry selling its software to 
the gamers. The game world 
has awakened to popular devel- 
opment tools, such as Dev- 
Track, Electric Cloud and Per- 
force, all of which had booths at 
the show. Versant was also at 
the event to hawk its databases 
and services to massively multi- 
player game companies. 

Many of the talks at the show 
were in sync with these enter- 
prise companies. Talks included 
"Data Architecture and Asset 
Management for Scalable Asset 
Production Workflows and 
Pipelines," "Security and Privacy 
in Games," and "Stretching 
Beyond Entertainment: The 
Role of Games in Personal and 
Social Change." I 
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Mainsoft brings SharePoint, 
IBM Rational tools together 



BY DAVID RUBINSTEIN 

Microsoft-to-Java platform integrator 
Mainsoft has set its sights on SharePoint 
with the release of Mainsoft Document 
Collaboration for Rational Jazz, software 
that connects IBM's Rational Team Con- 
cert tool set with Microsoft SharePoint or 
IBM's counterpart, Lotus Quickr. 

Yaacov Cohen, the CEO of Mainsoft, 
explained that barriers between business 
stakeholders and IT teams still exist. 
"They're using different tools," he said. 
"Business users aren't using the Rational 
tool set. They might use Office and 
SharePoint and Quickr, though." 

Cohen cited the case of a Web appli- 
cation development that needed to fol- 
low an organization's guidelines for 
branding. The guidelines might be held 
in a PowerPoint slide deck, while the 
requirements and design template 
might be in Word documents, and the 
developers are working in the Rational 
tool set. Using Mainsoft Document Col- 
laboration, a project manager could 
point developers to the PowerPoint 
guidelines with a link in the work order, 
Cohen explained. 

"This gives the software designer a 
complete view," Cohen added. "Busi- 
ness people want quick feedback. A 
development team could perhaps just 
show the UI elements of the Web appli- 
cation by posting their file on a Share- 
Point or Quickr site." 

Further, he pointed out, users can 
see who created or modified the docu- 



ments, and by putting the documents 
onto SharePoint and using real-time 
chat enabled by Lotus Real Time, both 
development and business sides can 
look at and discuss the prototype. 

Another initiative involves integrat- 
ing SharePoint workflows with Jazz 
processes, so "a designer can't complete 
a job task until the document is 
approved" on the business side, Cohen 
said. Future integrations are planned for 
IBM Rational Requirements Composer 
and Quality Manager. 

Jazz is the foundation upon which 
Rational Team Concert is built, and it 
plays off the need to improve collabora- 
tion around an organization, said Brett 
Hansen, a member of the IBM Rational 
team. "The world is making substantial 
investments in software to control costs, 
improve efficiency and meet customer 
needs. But many [software] projects 
don't meet expectations. So how do we 
break down organizational and technical 
barriers that inhibit successful imple- 
mentation of software?" 

IBM will be reselling Mainsoft Doc- 
ument Collaboration in two editions: 
Express and Standard. Express costs 
US$4,150; Standard goes for $25,000, 
with the ability to scale from 50 to 250 
developers, and includes workflow inte- 
gration. 

Additionally, IBM will offer support 
for Mainsoft Document Collaboration 
for its Jazz products under an agreement 
with Mainsoft. I 



MIMOSA'S NEARPOINT 
ARCHIVES ALL DOCS 
IN SHAREPOINT 

BY DAVID RUBINSTEIN 

The growth in SharePoint adoption has 
led to a rise in "underground" deploy- 
ments: one-off projects done by small 
teams in a company, resulting in impor- 
tant documents being left outside of exist- 
ing archive, backup and recovery systems. 

To address this, Mimosa Systems is 
bringing its Near Point file archiving 
solution to SharePoint with additional 
capabilities for data protection and e- 
discovery. This is done through what 
Mimosa calls comprehensive capture. 

"We can get everything," said Scott 
Whitney, vice president of product man- 
agement for Mimosa. "We don't just look 
for document libraries. We get lists, web- 
sites, blogs, wikis, site collection and site 
hierarchy," he said, itemizing some of the 
capabilities of NearPoint for SharePoint. 

Users can capture everything from a 
farm level to site collection using the VSS 
backup technology, and then can get finer, 



item-level capture through the Share- 
Point Object Model, Whitney explained. 

NearPoint for SharePoint also can 
perform block-level document version- 
ing. SharePoint keeps full versions of 
each document, so even if only one thing 
has changed in the document, Share- 
Point retains the entire document. 
Using Microsoft's Binary Data Compres- 
sion technology, NearPoint for Share- 
Point compares the differences between 
versions and saves only the changed 
blocks. "This lower storage costs 
tremendously by getting a huge ratio of 
compression," Whitney said. 

At US$40 per user, NearPoint for 
SharePoint was designed to improve e- 
discovery by making search more com- 
prehensive and by then locking down 
content. Whitney cited the legal "obliga- 
tion to preserve" requirement that states 
that as soon as an organization antici- 
pates litigation, it must preserve all con- 
tent related to that issue. 

"It isn't always obvious where to 
invoke" that, so all documents must be 
locked down and deletion must be con- 
trolled to remain in compliance, he not- 
ed. "There is no mechanism for these 
steps in SharePoint," he added. I 
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ComponentOne rolls out ASP.NET, Silverlight controls 



BY DAVID WORTHINGTON 

.NET component maker Com- 
ponentOne s first major release 
of the year will be focused on 
delivering new features for 
Web applications. 



Studio Enterprise 2009, 
released in March, introduces 
entirely reengineered 

ASP.NET controls, as well as 
new and updated Silverlight 
controls. ComponentOne's 



PDF and spelling controls were 
also given new capabilities. 

The suites ASP.NET con- 
trols include a calendar, editor, 
grid, input, schedule and tool- 
bar. While they maintain Com- 



ponentOne's previous object 
model, the controls are 
designed to have better perfor- 
mance, a smaller footprint, and 
increased client-side interac- 
tion, according to the company. 
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Each Silverlight control now 
has built-in support for Micro- 
soft's Silverlight Toolkit themes. 
Individually, the Silverlight cal- 
endar control has a new vector 
layer, as well support for the 
Keyhole Markup Language for 
annotating maps. The data grid 
control has been given Microsoft 
Outlook-style grouping, and the 
rich text box control has a 
redo/undo function and can 
import and export RTF docu- 
ments, the company announced. 

A new image class allows 
developers to programmatically 
edit image files and a new prop- 
erty grid for developers pro- 
vides the properties of specified 
objects, said product manager 
Chris Meredith. 

On the client-side, Compo- 
nentOne's chart control for Win- 
dows Presentation Foundation 
has added more chart types, and 
its PDF for .NET control has 
support for AcroFields and 
AcroForms, which make PDF 
documents interactive. I 

Telerik turns 
to Silverlight 

BY DAVID WORTHINGTON 

Telerik, a .NET component 
maker, announced in March 
that it would be releasing a grid 
control and a 3D engine for Sil- 
verlight. An automated testing 
tool for ASP.NET was also 
announced. 

The company says that it will 
deliver RadGridView for Sil- 
verlight this month as part of its 
upcoming Ql 2009 Telerik com- 
ponent suite, said spokesperson 
Ina Tontcheva. RadGridView 
features data compression to 
reduce server traffic and asyn- 
chronous data binding for better 
performance with large datasets. 

Telerik's upcoming Silverlight 
2-based 3D engine will be used 
for data visualization in upcom- 
ing chart and gauge controls, and 
it will help make business intelli- 
gence applications more interac- 
tive, the company said. 

Additionally, Telerik added 
an automated UI testing tool to 
its portfolio: WebUI Test Studio, 
which is designed for use with its 
RadControls for ASP.NET AJAX 
controls. WebUI Test Studio was 
developed in partnership with 
ArtOfTest, a quality assurance 
software developer, and will also 
be released this month. I 



www.sdtimes.com 



. Software Development Times . April 15, 2009 



NEWS 



13 



SpringSource update gives Java projects a bounce 



BY ALEX HANDY 

Beneath the mattress on which 
corporate Java applications rest 
are many Springs. In March, 
SpringSource updated a num- 
ber of those metaphorically 
compressed tension coils, such 
as SpringSource Tool Suite 2.0 
and updates to the open-source 
Groovy on Grails stack. At the 
heart of these updates are tools 
and templates designed to 
relieve the initial heavy lifting 
involved in getting a Spring 
project off of the ground. 

Christian Dupuis, principal 
software engineer at Spring- 
Source, said that the focus for 
SpringSource Tool Suite 2.0 was 
saving developers' time. "Our 
customers usually spend quite a 
bit of time in the beginning of 
their projects getting started in 
the IDE," he said. 

"What we do in [the tool 
suite] is provide project jump- 
starts. [The suite] guides users 
through a bunch of questions 
depending on the template 
they've chosen. It asks if you 
want to use Web 2.0 technolo- 
gies, or if you want to use 
Spring security to protect your 
application. In the end, we can 
create a bare-minimum project 
in Eclipse." 

SpringSource Tool Suite 2.0 
is available as an Eclipse plug-in 
or as a standalone Eclipse instal- 
lation. Dupuis said that the tool 
set includes a new way to edit 
Spring XML configuration files. 
It can validate these XML files 
on the fly and offer suggestions 
for fixing troublesome configura- 
tions, just as the Eclipse IDE 
does for Java code, he said. 

Dupuis also said that the 
release adds tight integrations 
with SpringSource's fledgling 
application server, dm. While 
those integrations do not extend 
to other application servers, dm 
users will be able to run their 
code and debug it within 
Eclipse, he pointed out. 

GROOVY TIMES 

Groovy Times are here again 
thanks to the work of the open- 
source communities around 
Grails and Groovy. Both projects 
are headed by SpringSource 
employees, but contributions 
are coming in from the commu- 
nity as well, said Peter Cooper- 
Ellis, senior vice president of 
engineering and product man- 
agement at SpringSource. 

For Grails 1.1 and Groovy 



1.6, the focus was primarily on 
optimizations, said Cooper- 
Ellis. This scripting language 
and Web framework built on 
top of Java are now also OSGi- 
friendly Aside from what he 



claims is a four- fold decrease in 
compile-time operations in this 
release, the Groovy on Grails 
team has also revised integra- 
tions with OSGi to make 
deployment and runtime modi- 



fication of applications simpler. 
Cooper-Ellis said that the 
Groovy on Grails suite has seen 
around 70,000 downloads per 
month since its initial release in 
February of last year. 



"We're continuing to focus 
on the whole life cycle. You'll 
see [that] we'll be focused on 
provisioning and management 
and our server projects going 
forward, said Cooper-Ellis" I 
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Protecode monitors IP compliance on the fly 



BY JEFF FEINMAN 

Protecode is taking the man- 
age-code-during-development 
perspective when it comes to 
intellectual property (IP) man- 
agement. 

The Ottawa-based company 
has placed its focus on preven- 
tive IP management, according 
to Mahshad Koohgoli, CEO of 
Protecode. Its preventive 
method offers intelligence on 
the desktop while the develop- 
er is in the midst of his or her 
project. 

"The real value of this is 
that, these days, good develop- 
ers don't write code," claimed 
Koohgoli. "These days, good 
developers are very resource- 
ful and know where to get 
code. While that's wonderful, 
it inherently has risks associat- 
ed with bringing code in, and 
if you can manage that risk in a 
controlled fashion, you can 
really take the benefit of all 
this vast amount of code that's 
available publicly." 

Laurent Lachal, an open- 
source research director with 
Ovum, said that doing preven- 
tive work is better than look- 
ing at code after a software 
project is complete because IP 
management is mature and 
complex. 

"The issue with IP manage- 
ment and code management in 
general is an issue of culture 
and process, more than soft- 
ware," Lachal said. "It's about 
having the right processes and 
the right culture in place. Over- 
all, it's about managing open- 
source code more tightly from a 
development point of view." 

Software IP Audit, released 
in March, analyzes software 
code for IP due diligence. It 
identifies licensing and copy- 
right attributes of open-source 
and third-party content in an 
organization's software assets, 
according to Protecode. It is 
offered with the company's 
Enterprise IP Analyzer. 

"Typically, software develop- 
ers, when they're working on a 
project, need to be aware of the 
obligation associated with the 
code that they bring in," said 
Koohgoli. "Open source is not 
free. It is always governed by 
the terms of a license, and those 
terms are too difficult to inter- 
pret for developer or their man- 
agers. Our solutions take away 
the pain of having to interpret 
the terms of the license and 



determine if it fits with the 
business." 

Protecode gathers informa- 
tion from internal counsels, IP 
law firms and investment 
banks to provide analysis of 



software analysis code. 
Koohgoli said that Software IP 
Audit captures IP policies and 
automatically determines if 
those policies are violated. For 
instance, if an open-source 



application doesn't have an 
approved license, the software 
notifies the developer of that 
application. Software IP Audit 
creates records of applications 
and code brought in and 



checks those records against an 
organization's policies. 

The IP protection market 
already has solutions from 
Black Duck Software and 
Palamida. I 
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The bottom line is that 
software needs to pay 



< continued from page 1 

theme he has seen is that larger-scoped 
projects are being pushed aside. 

"Projects that are not necessarily 
more risky, but definitely those where 
I'm expecting return on investments in 
12-24 months, those projects are defi- 
nitely moving to the back of the line," 
Locke said. "I've got a certain outcome, 
I've got a certain investment I'm going 
to make; those are the projects that are 
still being added to the docket for sure." 

FOCUSING ON PROFIT 

Patrick Hynds, president of consulting 
firm CriticalSites and a Microsoft region- 
al director, said that a great deal of an 
organization's "frivolous" projects have 
been canceled or put on the back burner. 
For instance, a collaboration or note-tak- 
ing system for developers to organize 
ideas and projects might be replaced with 
free software or even taking pen and 
paper, according to Hynds. A regional 
director is recognized by Microsoft's 
Developer Platform evangelism group 
for technical expertise. 

"If I'm a savvy manager and run a team 
of developers, I don't want to be working 
on internal infrastructure. I want to be 
working on something that clients would 
pay money for," Hynds said. 

Bill Evjen, global head of platform 
architecture for Thomson Reuters and a 
Microsoft regional director, manages a 
team that creates financial software on the 
.NET platform for Thomson Reuters. He 
said Microsoft has been working to speed 
up development by concealing low-level, 
tedious tasks in the .NET platform. 
Developers have quicker ways to do 
things like build data access layers and use 
REST (representational state transfer) 
interfaces to simplify the transfer of 
domain-specific data, he said. 

"It's turned more into a focus on 
building solutions or capabilities that 
have a much more immediate effect on 
revenue, rather than things that may be 
a few years out in revenue," Evjen said. 

On the IBM side, Locke pointed out 
the Measured Capability Improvement 
Framework (MCIF), which can help an 
organization measure a project's ROI by 
reporting project metrics. There has 
been a surge in sales of MCIF metric- 
based software and other IBM services 
that can help businesses justify their 
investments, according to Locke. 

Additionally, there has been an 
increase in the use of IBM's collaboration 
technologies, including the Jazz platform. 
"People see the immediate value of find- 
ing the people they need to work with and 
finding the artifacts they need to work on 
faster and more efficiently," Locke said. 



"We still see a great trend there." 

POTENTIAL DOWNTURN IN DOWNTIME 

A rough economy is no place for poorly 
thought-out or risky software ideas. The 
consultants interviewed for this story say 
that entrepreneurs need to be smarter 
about what they take on. 

"In recent years, there were plenty of 
people who regularly would ask me to 
build something to compete with eBay, 
and they had a US$2,000 budget or 
something crazy like that," Hynds said. 
"With those, basically you answer the 
call, figure out what they're talking 
about, and then you realize that this is a 
waste of your time and they go away. But 
most of those have dried up completely." 

Hynds put a positive spin on layoffs, 
saying developers could use the time 
they have between jobs to create new 
software and applications. 

"I think some of the bigger compa- 
nies over the next 20 years will have got- 
ten their start during this downturn," 
Hynds said. "Some developer and some 
sales guy will both be out of work at the 
same time, and they'll get together and 
create the next big thing." 

Hynds added that the economic 
downturn is a good place to experiment 
with new technologies because resources 
cost less. 

Additionally, there is a need for 
developers and software consultants to 
keep their skills up to date or contribute 
to open-source projects to increase their 
visibility in an insecure job market, 
according to O'Brien. 

"Will some people take advantage of 
having extra time and become entrepre- 
neurs, start new software companies, 
and develop innovative products?" 
O'Brien asked. "I'm optimistic, and I 
think that will happen." 

While many companies have been 
downsizing and some development teams 
have taken a hit, Thomson Reuters' Evjen 
said his team has actually been expanding 
because of growing interest in mutual 
funds and other collective investment 
funds through the economic downturn. 
He recently hired eight people in his St. 
Louis office, and he said that he expects to 
hire more. Evjens said that due to indus- 
try layoffs, he is seeing an increase in tal- 
ent among the candidates seeking 
employment in the current job market. 

"I'm seeing people that I would have 
never had the opportunity to interview 
before," he said. "They were happy 
where they were at and weren't looking, 
and then all of a sudden, they're finding 
themselves unemployed. I'm seeing a 
much higher caliber of candidate come 
through." I 
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Cheaters gaming the certification system 



< continued from page 1 

for exchanging brain dumps. 

Some acts are even more 
brazen. An individual has post- 
ed what appear to be questions 
captured by a camera during an 
actual certification testing ses- 
sion on the file sharing website 
4shared.com. 4shared did not 
respond to a request for com- 
ment, but it has a team dedicat- 
ed to fighting abuse of its terms 
of use. 

Microsoft's certification 
exams are copyrighted, and 
anyone that disseminates infor- 
mation about exams is violating 
their Non-Disclosure Agree- 
ment with Microsoft. 

When asked why he used 
brain dumps, a Microsoft Certi- 
fied Professional who prefers to 
remain anonymous replied, 
"Because I don't want to fail 
and pay another US$125 and 
reschedule. I scored 100% on 
70-640 [a Microsoft Certified 
Technology Specialist test]. 
Everyone gets 100% on that 
test. The brain dump has 100% 
of the questions, and any idiot 
can memorize answers." 

70-640 is a good example of 
how pervasive cheating is 
because Microsoft hasn't 
changed any of the questions, 
and all the questions are on the 
brain dumps, he added. 

Microsoft acknowledged the 
activities, saying that it has a 
team focused on preventing 
and addressing exam fraud, 
piracy, and any other illegal 
exam and certification activi- 
ties, according to Peggy Crow- 
ley, anti-piracy program manag- 
er at Microsoft Learning. 

The company works with 
trusted exam partners, to ensure 
exam security and the validity of 
certifications, Crowley noted. 
"Microsoft exam providers must 
adhere to specific security poli- 
cies and are subject to ongoing 
inspections in order to acquire 
and maintain their status as a 
Microsoft certification exam 
delivery provider," she said. 

"We realize the importance 
of protecting Microsoft Certi- 
fied Professionals' investment 
in achieving their professional 
certification." 

The practice of sharing brain 
dumps continues unabated as 
of this publication, but it 
appears that sadikhov.com has 
taken steps to ban members 
that discuss cheating, and it has 
removed its file-sharing section. 



Site administrators did not 
respond to contact requests. 

Cisco, Novell, Oracle and 
Sun IT certification brain 
dumps are also available on the 
Web through sites like brain- 



dumpcentral.com. Spokesper- 
sons from each of those compa- 
nies did not respond to requests 
for comment. 

Knowledge of these activi- 
ties is common, said Paul DeG- 



root, research vice president for 
channels and licensing strate- 
gies at Directions on Microsoft. 
"Most employers know that a 
certification does not prove that 
you are capable of performing 



certain IT duties without any 
further supervision or due dili- 
gence into your real abilities," 
he said. 

"We don't want to dismiss 
someone that worked hard to 
get a genuine certification; that 
is the kind of employee you 
want. But it does not prove 
absolutely they are qualified." I 
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Sun takeover rumor still just that 



< continued from page 1 

cated that the enterprise server 
market is not the most intrigu- 
ing part of this potential acqui- 
sition for IBM. The report, 
authored by UBS analysts May- 
nard J. Um, Arun Sharma and 
Ryan Cain, claimed that IBM 
would see greater synergies 
from other aspects of Sun's 
business. 

In the report, the analysts 
dissected the numbers on IBM 
and Suns server sales. "Although 
Sun does have a strong installed 
base of enterprise customers, 
given IBM's already high level 
of penetration into enterprises, 
it would seem to derive less 
synergies from a deal," the 
report said. 

"In addition, IBM already 
has a fairly complete server 
offering, with a 32% revenue 
share in 2008, thus Sun's server 
products (representing [a] 10% 
revenue share in 2008) would 
not appear to be the driver of 
the deal." 

Rymer speculated that anoth- 
er aspect of the deal that would 
be interesting to IBM would be 



OpenOffice, "where IBM is 
again trying to compete with 
Microsoft. Sun also has a very 
strong identity management 
business." 

But all of those desirable 
assets could raise the ire of fed- 
eral anti-trust investigators. 
Bozman said that the merger 
would blend two of the top five 
vendors of server hardware 
across multiple platforms, and 
it could therefore spark con- 
cerns of a monopoly. 

"If this were something that 
IBM wanted to do, would this 
be approved by the federal 



government? That would be a 
call someone in the administra- 
tion would have to make," said 
Bozman. 

NO HARMONY HERE 

Geir Magnusson Jr., project lead 
on open-source Java implemen- 
tation Apache Harmony, said 
that an ongoing rift between 
Apache and Sun "is fundamen- 
tally driven by Sun's difficulty in 
realizing significant revenue 
from Java. Sun has been very 
clear that the reason Apache 
doesn't get its [technology com- 
patibility kit] license is that Sun 




Sun's product and services revenues have seen steep declines. 



needs to protect its revenues." 
IBM has contributed develop- 
ment time and resources to Har- 
mony. 

"I think IBM has a different 
fundamental base in and around 
Java," he said. "Even if IBM 
would withhold the TCK, they 
wouldn't have the economic 
rationale that Sun claims to 
have." 

Rod Johnson, creator of the 
Spring Framework and a mem- 
ber of the JCP's executive com- 
mittee, said that IBM and Sun 
bring different qualities to the 
table for the Java world. John- 
son, speaking only for himself 
and not on behalf of the JCP, 
said that five years ago, such a 
merger might have had more 
impact on the Java world. 

"Long ago the developers 
liberated the platform from Sun 
and IBM, who were running 
the platform into the ground," 
he said. "I think there would 
definitely be questions about 
the JCP and the way the JCP is 
operated. The company behind 
it, being Sun, has had a huge 
amount of influence and power. 



Sun cloud platform emerges 



BY ALEX HANDY 

Sun Microsystems is preparing 
for cloudy days ahead. The com- 
pany in mid- March revealed its 
strategy for cloud computing, 
announcing its Open Cloud Plat- 
form, which will focus on inter- 
operability, and a simple API for 
interaction with cloud services. 

While interoperability stan- 
dards for clouds, cloud APIs 
and virtualization are still 
emerging and evolving, Tim 
Bray, Sun's director of Web 
technologies, said that the Sun 
cloud will either adopt popular 
standards as they arrive or help 
to foster the creation of these 
standards. 

Sun's cloud platform will be 
similar to Amazon Web Services, 
he said. Users will provision 
standardized server instances 
inside a compute cloud that is 
similar to EC2 and will have 
access to a storage system simi- 
lar to Amazon's S3. Sun is still 
mulling the addition of compo- 
nents along the lines of Ama- 
zon's SimpleDB and message 
queue. Bray, though, noted that 
"there are a couple of things" 
that will differentiate Sun's 



cloud from Amazon's platform. 

"People who've actually had 
experience hands-on with Ama- 
zon's offering say that the fact 
[that] you've got one API for 
storage and one for compute 
makes things more complicated 
than they really should be," said 
Bray. "Everybody who runs 
something serious in a data cen- 
ter knows you really need to be 
able to script things. The biggest 
difference is the fact that we're 
trying to introduce an open API 
that other people can learn. In 
the enterprise, at least, people 
are really scared of lock-in these 
days. When something strategic 
comes along, they ask hard ques- 
tions like, Tf I deploy with you 
and it doesn't work out so well, 
what's my barrier to exit?' " 

That description of Amazon's 
API as complex, however, could 
also be interpreted as a more 
robust feature set. Amazon has 
accrued a multitude of cloud- 
based services for its customers, 
and though many of them 
require their own sets of com- 
mands, they are still unique in 
the cloud world. Services such 
as Amazon's Mechanical Turk, 



where end users are paid small 
amounts of money to accom- 
plish minute tasks, or Amazon's 
payment and message queue 
systems, which do some of the 
developer-side lifting, have been 
available in Amazon's cloud for 
over two years now, forcing Sun 
to play catch-up, whether with 
one API or dozens. 

Adam Selipsky, vice presi- 
dent of product management 
and developer relations for 
Amazon Web Services, said that 
the strategy for Amazon's cloud 
is focused on flexibility. 

"Where we started was to 
provide all the building blocks. 
There's an incredible variety of 
needs in our customer base. We 
have all the separable funda- 
mental Web services with fun- 
damental calls. That's been one 
of the principle reasons these 
services have been so popular. 
We do think it's important to 
make our services easier to 
use," he said. 

Bray said that Sun is hoping 
to simplify API calls by offering 
a single unified cloud API for 
storage and compute. He said 
that the company will also avoid 



tying users to the platform, 
hence the Open Platform. 

For now, it remains unclear 
when Sun will make its cloud 
publicly accessible, but the 
company already has experi- 
ence in hosting a cloud of sorts. 
Sun's Grid has been accessible 
for years, but it has always been 
focused on compute-intensive 
operations. Bray said that the 
Sun Grid has taught Sun's cloud 
team how to manage large 
numbers of machines and keep 
them running reliably. 

"The Grid got lots of use, 
but they weren't really doing 
Web things. They were folding 
proteins and charting oil fields," 
said Bray. He also identified 
identity as a difficult area for 
innovation and management in 
clouds. 

"Identity is hard," said Bray. 
"Identity technology is actually 
fairly technologically difficult. 
It's the prickliest rats' nest pos- 
sible. We needed somebody 
who knows this stuff down to 
the ground to get it right." 

That somebody is Michelle 
Dennedy, Sun's chief gover- 
nance officer. She's been moved 
over to Sun's cloud team to 
head up the effort to bring 
identity capabilities into Sun's 
cloud effort. I 



Broadly speaking, if Sun wants 
something to happen [in the 
JCP], it happens. If they don't 
want something to happen, it 
doesn't happen." 

Johnson went on to say that 
Sun's inability to compete seri- 
ously in the software market 
has, until now, fostered greater 
collaboration in the JCP. "If you 
get a situation where you have 
the company controlling the 
JCP being a formidable com- 
petitor, you have to wonder 
what that means to a company 
like Oracle," said Johnson, won- 
dering if an IBM-controlled 
JCP would frighten away other 
corporate participants. 

TROUBLED TIMES 

If technology is why the deal 
would make sense for IBM, 
money is the reason it would 
work for Sun. The company has 
not been successful in its quest 
to turn around its fortunes, 
which plummeted when the 
dot-com bubble burst earlier 
this decade. In the almost three 
years since current CEO 
Jonathan Schwartz took the 
reins, Sun has ended many 
quarters showing significant 
losses and has had o take on 
heavy outside investment to 
shore up its defenses. 

Bozman noted that South- 
eastern Asset Management, 
which snatched up 22% of Sun's 
common stock in December 
2008, has two seats on the com- 
pany's board of directors. At the 
time, the deal was worth more 
than half a billion dollars. 

Sun also accepted invest- 
ment from private equity firm 
Kohlberg Kravis Roberts & Co. 
in early 2007. At the time, the 
deal was worth $700 million. 
Both of these firms, said Boz- 
man, would likely be a big part 
of any negotiations. 

Rymer agreed, pointing out 
that some members of Sun's 
board may have been forcing 
the sales issue. 

Sun's own estimates put its 
financial customers as compris- 
ing around 20% of its total rev- 
enues, and with financial insti- 
tutions currently in dire 
straights, Sun's bottom line has 
been hurting. Sun's Q2 2009 
earnings, reported in Decem- 
ber 2008, showed a $209 mil- 
lion loss for the company. 

UBS has estimated that Sun 
will lose about $300 million for 
the year. I 
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What a Sun-IBM merger could mean for Java 



BY ANDREW BINSTOCK 

The acquisition of Sun by IBM raises sev- 
eral interesting possibilities, especially in 
regard to the wide array of Sun software 
that is likely to be affected. Here 
are some thoughts on the effects 
of the deal on key technologies. 

Java. Several pundits have speculat- 
ed that if IBM controlled Java, the lan- 
guage and platform would be even more 
open source than it is, and that problems 
such as product conformance tests for 
OSS versions of Java would go away. 
This is probably correct. However, the 
one thing that will not happen is IBM 
ceding control of Java to a third party. In 
other words, while the JCP might be dis- 
mantled (though I doubt it), some sys- 
tem will remain in place by which IBM 
can pursue its agenda in Java. 

The reasons for this are woven into 
IBM's genetic material. Big Blue has 
always had a strong preference for OSes 
and execution environments that it can 
control. This preference took what the 
company viewed as a very bad turn when 
IBM teamed up early with Microsoft on 
the PC. All went well until the infamous 
spat that led to the Windows-OS/2 split. 

When that occurred, according to 
what IBM insiders told me years ago, the 
company recognized that it could never 
again put the fate of its operating systems 



ANALYSIS 



in the hands of a third-party vendor. For 
that reason, IBM was attracted to Java for 
its enterprise apps. It could run them on 
its own and just about any other operat- 
ing systems. Because of this, it 
enthusiastically endorsed Java. 
However, IBM soon realized 
that Sun would only let it in so far. Sun's 
wariness of IBM has been a longstand- 
ing sore spot for Big Blue. So, having 
acquired Java in this transaction, IBM is 
hardly going to turn over control to 
another third party. Expect the direction 
of Java to be influenced by IBM for the 
foreseeable future. 

Enterprise Java. WebSphere is a well- 
established Java EE server, while Sun's 
various EE server initiatives have gone 
nowhere. I expect the Sun EE offerings 
will fade away; the open-source software 
products could live on, but I doubt IBM 
will give them enthusiastic support. 

Java Tools. IBM has already devel- 
oped a solid IDE that it turned over to 
the Eclipse Foundation. I can see no sce- 
nario in which it would adopt or extend 
NetBeans. I suspect NetBeans will be 
cut loose as an open-source project to 
live or die by how much its existing com- 
munity supports it. A similar fate might 
well befall language projects like JRuby 

Even though it only takes a couple of 
engineers to keep a language moving 



forward, I am not sure IBM will see 
much value in this. And IBM's record in 
new language development is not great. 
You might recall that the first major 
scripting language for Java was IBM's 
NetRexx, an excellent product that I 
have discussed several times in my col- 
umn. But IBM put little effort into mar- 
keting it, never open-sourced it, and 
eventually reassigned the principal engi- 
neer to other projects. 

Databases. MySQL is the obvious 
prize here. Rebranded as part of the 
DB2 product line, it could easily be Big 
Blue's ticket into the lower end of the 
market, that is, the sub-enterprise and 
SMB space. 

Right now, IBM's free version of DB2 
is akin to the free version of Oracle: a 
scalability-limited placeholder for small 
businesses that might want to try out the 
databases. MySQL, by comparison, has 
wide industry support and no artificial 
limits on database size or number of 
processors, so instead of being a push 
tool like the free DBMS products, it can 
become a pull product that encourages 
users to step up to paid versions of DB2. 
Pulling that off will require careful mar- 
keting by IBM, a company not known 
for its prowess in that area. 

Operating Systems. Solaris is a far 
superior version of Unix than AIX. In the 



Unix community, AIX has always been 
viewed as a technologically weak variant. 
I expect that IBM will either migrate AIX 
customers to a relabeled version of 
Solaris, or it will migrate some superior 
features of Solaris (such as ZFS) to AIX, 
thereby significantly bolstering its capa- 
bilities. Some of these features are likely 
to appear in IBM's Linux as well. 

The companies' respective cloud- 
computing efforts, which are both 
embryonic, will surely be merged. The 
future of this technology is too com- 
pelling to throw out either IBM's or Sun's 
research and preliminary deliverables. 

Beyond the software components are 
the hardware aspects of this deal: IBM 
will surely close down the SPARC 
processor line over several years and 
move the SPARC engineers to the Pow- 
er and PowerPC processor design team. 
SPARC Niagara was an innovative prod- 
uct and IBM will surely want to hang on 
to those designers. Sun's storage busi- 
ness will be something IBM either sells 
off or quietly folds into its enterprise 
storage product line. 

Overall, in my opinion, for the few 
billion dollars this deal costs Big Blue, 
this acquisition is a stellar bargain. I 

Andrew Binstock is a software analyst 
and a columnist for SD times. 
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I adies and gentlemen! Welcome to the RIA Theatre for 
^■i this evening's heavyweight main event! 

In the red corner, hailing from the land of Macro- 
media, weighing in at five years on the market and 
packing the punch of the Flash platform: 
Adobe Flex! 

In the silver corner, fresh off a 3.0 release in 
the halls of Las Vegas at MIX09, crafted by 
the hands of mighty Microsoft and trained in 
the ways of .NET: Microsoft Silverlight! 

And in the yellow corner, the new kid on 
the block with a December 1.0 release, but 
no less able to deliver complex application 
knockouts, the Sultan of Sun: JavaFX! 

The rich Internet application (RIA) 
market is a three-man fight, with Flex, 
JavaFX and Silverlight all looking to jab 
their way into developers' hearts with a 
steady stream of new features and capa- 
bilities. According StatOwl, a provider of 
statistical analysis and market research 
on Internet usage, the Flash platform had 96.69% of 
global market penetration in RIA usage in 
February, while the Java browser 
ug-in JVMs had 81.4% and 
Silverlight had 21.58%. 



BY JEFF FEINMAN 



Those figures were an ever-so-slight dip for the Flash 
platform and a relatively big gain for Silverlight; in Sep- 
tember 2008, Flash had 97.39%, compared to Java's 
81.31% and Silverlight's 17.63%. 

While there are many similarities between the three 
platforms, and experienced developers can likely churn 
up eye-catching, rich applications with any of them, 
there are also differences that can factor into which 
platform a developer will choose. 

Many developers have stated that different skill sets 
and familiarity with different programming languages 
will aid RIA builders in mastering their respective plat- 
forms. Rockford Lhotka, principal technology evange- 
list for Minnesota-based IT consulting firm Magenic, 
said that developers with C# or Python programming 
expertise and experience with WPF applications, for 

continued on page 26 ► 
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instance, have a head start when using 
Silverlight. Many Flex developers, 
meanwhile, said that a background in 
Java can be helpful when learning Flex's 
ActionS cript language because the lan- 
guages have similar object-oriented 
characteristics. 

Dave Meeker, user experience strate- 
gy lead for RIA development company 
Roundarch, agreed with the notion that 
developers with specific programming 
skills will gravitate toward a certain plat- 
form. Developers knowledgeable in Java 
have gone the Flex route. One of the 
intentions behind Flex was to cater to 
developers that have built Web applica- 
tions in Java and JavaServer Pages, 
Meeker said. 

"You can see a line drawn through 
the development community," Meek- 
er said. "The guys that are more open 
source, Java, and traditional Adobe 
Macromedia developers are all 
more in the Flex camp. That's 
great, but there are also [around] 
millions and millions of Windows 
developers out there who will 
end up in the Silverlight camp 
because it's what they know. 

"I always cringe when I see a 
company embarking on a project 
and saying, 'We're going to use a 
brand new technology that we've 
never used before, and we have a 
deadline to meet.'" 

DIFFERENCES IN MATURITY 

R.J. Owen, senior developer at Den- 
ver-based user interface designer Effec- 
tiveUI, said that Flex is a more mature 
platform, and that JavaFX and Sil- 
verlight have catching up to do in the 
coming years. 

One application that Owen built 
using Flex was an online interactive pro- 
gram called Discovery Earth Live, 
which tracks global climate data for the 
Discovery Channel. The app displays a 
3D view of Earth that shows video on 
climate trends, and Owen said that Flex 
is the only platform with the proper 
capacity to build 3D interfaces. 

"Silverlight doesn't have nearly a 
mature enough codebase to build some- 
thing this complex," Owen said. 
"They're going to be seeing some pretty 
basic RIAs for probably the next year." 

Microsoft executives, however, said 
that Silverlight 3 brings the ability to 
create 3D graphics. 

Because Silverlight is newer than 
Flex, it doesn't have as broad a user and 
knowledge base as Adobe's platform, 
according to Owen. Sandy Scott, princi- 
pal software engineer at Marathon Tech- 
nologies, echoed his sentiment on Sil- 
verlight's newness. Owen said that the 
community of developers for Flex 
helped him with Discovery Earth Live 



because many developers shared their 
previous experiences in creating 3D 
applications using Flex. 

JavaFX, meanwhile, is integrated 
with the Java Runtime, and JavaFX 
applications will run on any browser that 
runs the Java Runtime Environment. 
But JavaFX lacks the maturity level of 
the other platforms, as it was made gen- 
erally available in late 2008. However, 
developers that have used JavaFX tout- 
ed its ability to call millions of Java class- 
es with its rich client, along with its abil- 
ity to improve Java deployment and 
make Java leaner. 

Meeker, who has experience working 
with all three platforms, said that JavaFX 
wasn't the right platform for him. "It just 

does- 




n't give us the tools 

we need to build the kind of apps we can 

and deploy them to a large scale," he 

said. 

"For a corporate environment, it 
might be more suiting, but lined up 
against Flex and others, it isn't right for 
our clients. Plus, we had some problems 
with the development environment; on 
the Mac, we downloaded the dev tools 
they had, and they didn't install right. It 
just had a lot of problems." 

As Owen alluded to in his comment 
about Adobe's advantage in maturity, one 
of the main factors currently in the com- 
petition among the three platforms is age. 
Adobe is the veteran within the group, as 
Flex was released in March 2004 and Sil- 
verlight was introduced in early 2007. 

"There's a wealth of creative knowl- 
edge and experience in the marketplace, 
together with five years of proven devel- 
opment with the Flex framework," said 
Dave Gruber, Adobe's group product 
marketing manager for Flex. "We've built 
up a strong community and a strong set of 
partners that we work closely with." 

On the other end of the age scale, 
Jacob Lehrbaum, a senior product line 
manager at Sun, noted JavaFX's youth as 
a platform but said that the company has 



seen a big uptake in the technology. 
Activity in forums and mailing lists has 
grown in recent months, and many blogs 
and websites around JavaFX have 
spawned, he said. Additionally, the com- 
pany last month launched the JavaFX 
Coding Challenge, which will have 
developers show off applications 
designed with JavaFX for cash prizes. 
The contest will run until the end of 
May, and more details are available at 
www.j avafx. com/challenge . 

RISING ABOVE THE COMPETITION 

One of the ways that Sun is trying to dis- 
tinguish itself is in focusing on bringing 
RIA content across all devices. In Feb- 
ruary, the company released JavaFX 
Mobile, which offers the same features 
as the desktop version for development 
on mobile devices. Lehrbaum said that 
the company's next push is to bring 
JavaFX to televisions. While he 
declined to provide details regard- 
ing how JavaFX would work on TV, 
he said the idea is to leverage 
technologies like Blu-ray for 
JavaFX. 

Lehrbaum said that another 
advantage for Sun in the RIA 
market is the Java platform 
itself. "You can leverage fairly 
powerful libraries, and we 
have an advanced, multi- 
threaded VM that can 
handle pretty complex 
functionality under the 
surface," he said. 
"JavaFX is introducing a 
way to make the user interface and 
interactivity more fun and intuitive 
while leveraging the underlying capabil- 
ity they already had with Java." 

Chris Swenson, Microsoft's senior 
strategy manager of the .NET platform, 
said that in order to continue competing 
with Adobe and Sun in the RIA market, 
Microsoft's strategy is to innovate as fast 
as possible and to try to deliver features 
that are unique for RIA development. 

"I think we do that with our platform 
and our tooling," Swenson said. "Sil- 
verlight's only been on the market for 18 
months, so we're innovating at an 
incredibly rapid clip and bringing all 
these features into Silverlight at an 
incredibly fast pace. I think that's how 
we're going to compete in this market, 
and if we make our customers happy, I 
think we'll be successful." 

Adobe's Gruber, meanwhile, said that 
the company's strength lies in the overall 
Flash multimedia platform, which 
encompasses Flex, the AIR runtime, the 
Flash client, and various other software 
and services. He said that Adobe will 
continue to innovate and build out the 
platform in order to maintain competi- 
tion with the other platforms. 

"As we look at the competitive space 



and look at what Microsoft and Sun are 
doing, we believe we're setting the 
vision for where RIAs are going in the 
world," he said. "[I] believe we're setting 
the bar for the others to follow." 

An interesting challenge for the three 
companies will be having the most suc- 
cess at enticing developers without relat- 
ed programming skills. 

"I guess the challenge that these 
companies have now is packing enough 
features into their tool set to swing 
someone in the opposite direction," 
Meeker said. "The Adobe people are 
die-hards and the Microsoft people are 
die-hards, so I don't know if either plat- 
form has matured to the point to make 
people say, 1 have to switch to that 
because it's the best thing out there.' " 

When it comes to luring developers 
from the other side of the playing field, 
Gruber admitted that there are many 
companies and developers deeply com- 
mitted to Microsoft software that will 
choose Microsoft over anything else. 
However, there is also a large portion of 
the developer base that are open to 
using Flex in conjunction with the .NET 
platform, he said. Third parties have cre- 
ated Visual Studio plug-ins for Flex 
development, and Adobe will "continue 
to invest" in integrations between Flex 
and .NET 

Swenson claimed that there are many 
Java developers learning how to work 
with the .NET platform, which develop- 
ers have said is comparable in usability 
to Silverlight. There are capabilities for 
developers to use JavaScript within Sil- 
verlight, and there are similarities 
between C# and Java. Additionally, an 
advantage to the .NET platform is that it 
involves writing less code, he said. 

Lehrbaum also acknowledged 
that the natural inclination for 
developers is to use technologies 
that are familiar and easy. While 
most JavaFX adopters have been 
Java developers, Lehrbaum said that 
he's learned from developers that 
they're willing to try new things, 
especially if it can help them solve a 
problem. 

"A lot of the languages and technolo- 
gies that people are using today aren't 
so different that they're too challenging 
for developers to pick up," Lehrbaum 
said. "If it can help them tackle a busi- 
ness problem or create content faster, 
using that technology will be a legiti- 
mate option." 

GOING OFFLINE 

The new features announced in Sil- 
verlight 3 caught the eye of Meeker, who 
attended Microsoft's MIX09 Conference 
in mid-March. In Meeker's opinion, 
improvements to Silverlight include its 
interoperability with the H.264 video 
continued on page 28 ► 
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standard, a feature that Gruber 
claimed Adobe already offers in 
Flex, and the use of a graphics 
processing unit for multi- 
threading. However, Meeker 



said he wasn't convinced that 
any of the new features will be 
huge difference-makers in 
terms of giving Silverlight an 
advantage over the other plat- 
forms. 



One feature in Silverlight 3 
that Microsoft is excited about 
and developers have lauded is 
the ability to work offline and 
out-of-browser. Swenson said 
that this lets developers create 



lightweight data-stacking appli- 
cations that can serve as a "Web 
companion." 

"The offline support is com- 
pelling because you could be in 
the middle of either a media 
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experience or an application 
experience and lose Internet 
connectivity for a little bit," 
Swenson said. "But because we 
cache data on the back end, you 
can still either work with that 
application or consume that 
media. And once you get Inter- 
net connectivity again, you can 
continue where you left off." 

Gruber said that Adobe AIR 
has similar capabilities, offering 
local access to data storage in an 
embedded relational database 
that comes with AIR. AIR lets 
developers drag files into and 
out of the application, as well as 
run databases offline. Addition- 
ally, Adobe s runtime is compat- 
ible with Linux and Windows, 
according to Gruber. 

"You're creating applica- 
tions for Adobe AIR using the 
Flex framework, so for that 
same application that you can 
write to run in the browser, 
there's a whole new series of 
APIs and commands that allow 
you to have access to many 
capabilities outside the brows- 
er," Gruber said. 

Sun, meanwhile, said that 
such offline capabilities are also 
available in JavaFX. Lehrbaum 
said that JavaFX can launch 
applications from the desktop 
and the Web. If a developer 
wants to receive live informa- 
tion from the network or cloud 
that he or she is connected to, 
then Web connectivity is useful, 
but [those developers] can also 
develop applications without 
network connectivity, he said. 

Though Adobe and Sun 
may not seem fazed, Meeker 
thinks that Microsoft's offline 
capabilities give the company a 
point in the battle against its 
competitors. 

"If Adobe's playing chess 
against Microsoft, Microsoft 
didn't. . .put them in checkmate, 
they just made a move where 
Adobe knows they're going to 
either lose a bishop or a knight," 
he said of the offline capabilities. 
"They're really going to have to 
think their way out of this, 
because Microsoft essentially 
just jammed up Adobe's strategy 
and Adobe will have to answer 
one way or the other." 

Moving forward, innovation 
most likely won't stop at offline 
capabilities and 3D graphics. 
Sun's television capabilities are 
expected to be unveiled in the 
coming months, Adobe has 
plans to make its Flash Catalyst 
codeless interface designer 
available in a beta, and no 
doubt Microsoft will soon be 
putting together the pieces for 
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FROM THE EDITORS 

Sun needs grown-ups 

Is a big, successful IT company going to buy Sun Microsystems? If so, 
it would be good for Sun — and for the industry. 

Mid-March saw rumors flying about a potential Sun acquisition by 
IBM. As you would expect from two large, publicly traded firms, nothing 
official was said by company executives. Its possible that the rumor was 
a trial balloon. It's possible that someone spilled some inside information. 
It's possible that it was entirely fictitious. 

Our opinion: It's time for grown-ups to run Sun, and if that means 
Sun's acquisition by IBM or another big player, then we're all in favor. 

Under chief executive Jonathan Schwartz, Sun has too much vision 
and too little execution. Sun's many technology geniuses have grand 
ideas, but company leaders haven't found a way to turn those ideas into 
profit. Investments are scattershot, ranging from pushing the limits of 
high-end data center hardware, fostering open-source operating systems, 
pushing Java, competing in the mobile space, sticking to its knitting on 
developer tools, entering the rich Internet applications market, entering 
the open-source database market, and more. 

Pundits have been scathing about Sun. So has the stock market. In his 
blog on March 2, Schwartz wrote that the company need do only three 
things: recruit developers, deliver compelling commercial offerings, and 
execute an effective selling/service connection between developers and 
commercial offerings. 

Sun has a strong developer message, but it's not knocking the ball out 
of the park. Sun has strong commercial products, but it's not taking the 
world by storm. On the sales front, Sun certainly hasn't delivered; even 
Schwartz calls it a "work in progress." 

That's where the grown-ups come in. It's time for a mature, business- 
centric company to take over Sun and its tremendous product and intel- 
lectual property portfolio — and turn them into a business. 

Exam sites: Clean up your act 

It's easy for cheaters to obtain answers to IT certification tests. The test 
industry must do a better job of policing itself, ensuring that its certifi- 
cations have genuine value, demonstrate expertise, and reward hard work. 

The firms that issue certification exams must perform the due diligence 
necessary to reduce cheating. Failing to do so robs the companies in whose 
names they're issuing the tests. It also steals from the honest professionals 
who work hard to earn their certifications, and it makes a mockery of the 
organizations that rely upon those certifications to help screen job appli- 
cants, hire consultants and reward their employees to gaining certifications. 

Answers to many certification tests can be found within minutes on the 
Web. A community of cheaters works endlessly to outwit the authorities. 

Getting certified may not guarantee a job, but it will get a job appli- 
cant through the door. Certifications can also mean high pay. Put simply: 
It pays to cheat. 

We're not naive. We know that testing companies make money from 
issuing tests. The more people take and pass those tests, the more mon- 
ey the testing companies make. Making the tests harder to cheat on will 
cost them more, both in added investment and in a reduced number of 
certifications issued. 

Too bad. The value of certification is tied to its trustworthiness. Ram- 
pant cheating degrades the certification and harms the individuals and 
organizations that invest in taking the tests and using the certifications. 

We call upon the test organizations to do whatever it takes to restore 
trust to their tests — including rotating their question pools more often, 
going after websites that trade in tests and answer sheets, and punishing 
test-takers who cheat by publishing their names and banning them from 
future tests. 

And we call upon the companies in whose names many of these certi- 
fications are offered, like Microsoft, Cisco and IBM, to hold their test 
organizations to the highest possible standards. It's time to behave with 
integrity. I 



Continuous testing cometh 



A core practice of the agile movement 
is to release often. The goal of many 
small releases is to provide developers 
with feedback early and often on what 
they're doing. It also allows users to 
make changes along the way that enable 
the project to completely fill its require- 
ments and, especially, user and cus- 
tomer expectations. 

As the practice of frequent 
releases proved to be a capa- 
ble means of improving prod- 
ucts by getting frequent 
input, agile practitioners real- 
ized it had a similar effect on 
developers within the devel- 
opment team. That is to say, if 
developers completed their 
coding cycle quickly and 
began the non-coding activi- 
ties promptly, they could get near-imme- 
diate feedback on the changes they just 
made. 

When thought about in this context, 
unit testing is a formidable tool for pro- 
viding just such feedback. 

For example: You code, run tests, fig- 
ure out what you broke, and decide how 
to respond to the tests' feedback. You 
might suddenly discover that if you con- 
tinue down the path you were innocent- 
ly traveling, you will unhinge a key mod- 
ule that would take far too long to fix. 

You discreetly back up (you can tell 
how far to back up by the test feed- 
back), and you devise a different 
approach that skirts the problem the 
unit tests have just flagged. This 
scenario makes good use of tests. And 
other similar examples all suggest 
that the sooner you run tests after 
you code, the earlier you can detect 
problems and make the necessary 
adjustments. 

The recognition that the earlier you 
test your code, the easier it is to fix, 
spread out into new pastures a few 
years ago — namely, in builds. As all 
developers know, it's not enough that 
code passes tests, it must also not break 
the build. 

To provide quick feedback on build- 
breaking code check-ins, the practice 
known as continuous integration 
emerged a few years ago. 

As I have discussed in previous 
columns, continuous integration soft- 
ware monitors a source-code repository 
and starts up a new build of the project 
every time code is checked in. This 
enables developers to know within a 
few hours whether they have broken 
the build and how. 

Prior to continuous integration, a 
project might go a full day without a 
full build, or sometimes longer. So 
when the build broke, the ability to 
recall the motivation for specific 
changes is limited by the delay. 

But if the feedback can be given 



Integration Watch 




within a few hours from the code 
check-in, the developer can more like- 
ly zoom in on the defective code and 
fix it quickly. 

A new trend called continuous test- 
ing (CT) is now emerging. It consists of 
running unit tests in the background 
within the IDE while the developer is 
coding. 

Depending on the prod- 
uct, there are various triggers 
for kicking off the test 
suite. Compiling the code is 
a common choice. The prod- 
ucts that perform CT typical- 
ly show a discreet red/green 
bar inside the IDE to which 
the developer can respond 
as needs and preferences 
dictate. 

The idea, once again, is to test the 
new code against preceding tests, be 
they unit tests or characterization tests, 
to monitor the scope of changes. By 
running the tests often, the feedback 
loop is much shorter and the developer 
can make better decisions as he contin- 
ues to advance the code. 

According to research by David 
Saff of MIT, who originated the con- 
cept of CT in roughly 2003, developers 
who used the technique consistently 
delivered changes on schedule. This, I 
believe, is because they were never 
blindsided by unexpected conse- 
quences of their changes. 

There are other advantages to CT If 
the traditional, non-test-driven-devel- 
opment model is followed, code is writ- 
ten, then tests are run, then tests for 
the new changes are written and run. 
The cycle of running tests can take a 
while on large projects, meaning that 
developers will get up and do other 
things while the tests run and will fre- 
quently be lured into the growing dis- 
traction gap caused by tools (e-mail, 
instant messaging, Twitter, etc.) that 
clamor for attention. By getting the 
feedback right away, there is no pause. 
Moreover, CT does away with the ten- 
dency to write huge amounts of code 
before running tests. 

Today, there are two principal con- 
tinuous testing products in the Java 
space: Ben Rady's Infinitest (infin- 
itest.org) and Kent Beck's JUnitMax 
(junitmax.com), a subscription-based 
product that's still in beta. Both prod- 
ucts are available as Eclipse plug-ins, 
and Infinitest is available for other 
IDEs, notably IntelliJ from JetBrains. 
For Ruby programmers, ZenTest is the 
only CT tool I know of. 

In a future column, I expect to look at 
these products in greater detail. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his blog at 
hinstock.hlogspot. com. 
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YOU'VE GOT TO TRUST your com 
munity to do the right thing, but also 
make it easy to clean up after people if 
they misbehave. 

That's a major point that I took away 
from the opening keynote from EclipseC- 
on, held in Santa Clara last week. The 
speakers were Jeff Atwood, famous for his 
Coding Horror blog, 
and Clay Shirky, author 
of the insightful book 
"Here Comes Every- 
body," about the power 
of social groups in pub- 
lic life. 

The topic was "The 
Social Mind: Design- 
ing like groups matter," 
and Jeff and Clay found patterns in the 
success from their creation of Stack- 
Overflow, a user community for devel- 
opers, and from successful communities 
like SlashDot and Wikipedia. 

Here are four best practices that Jeff 
and Clay offered regarding creating a 
successful community site (the headings 
are theirs, the descriptions mine): 

1. Radically lower the bar for partici- 
pation. Don't make prospective commu- 
nity members jump through hoops to 
participate or make them demonstrate 
specific expertise. Look at what makes 
Wikipedia successful: It has contribu- 
tions from the small number of experts 
who really care about a specific subject, 
and also smaller contributions from the 
huge number of people who have a 
smaller commitment. Anyone can start a 
Wikipedia page, or change one, or add 
to a topic or correct a mistake. 

2. Trust (some of) your users. While 
you want a lot of participation, not all 
participants are equal. Some folks con- 
tribute more, some are more dedicated, 
some add a huge amount of value. Oth- 
er folks contribute less. How do you 
decide who is more valuable and more 
trustworthy? Find ways to let the com- 



munity decide, whether it's through 
rankings, karma points or whatever. 
Then provide the means for those with 
more trust to lead the community. 

3. Life is the world's biggest 
MMORPG. Successful massively multi- 
player online role-playing games mimic 
real life. People work hard if they can see 

that they're making 
progress... and if they 
have goals to achieve. 
Those goals might be to 
slay dragons, win karma 
points, accumulate gold 
pieces, or whatever. 
Build those mechanisms 
into your system to 
I reward behavior that 
you'd like to see in your community. 

4. Bad stuff happens. Some people 
paint beautiful murals, others spray 
obnoxious graffiti. That happens online 
too, as you can see by the abusive com- 
ments left on many online communities. 
The more general the community, the 
more people just like to go by and spray 
graffiti. Accept this, but make sure you 
have ways to quickly delete community- 
destroying activity. 

Jeff and Clay suggest starting small 
and getting really good at what you do, 
then letting the community grow in a 
scalable, sustainable way. Think about 
how Google, eBay or Facebook started. 
That's the recipe for success in a commu- 
nity, both in the real world and online. 
— Alan Zeichick 

I'VE HEARD SOME UGLY stories 
recently about people's mobile phones 
or other handheld devices causing a 
great deal of trouble due to thieves. 

In one particular story, a woman had 
her handbag stolen. The thief texted her 
husband from her cell phone asking for 
their PIN number. The husband unwit- 
tingly supplied it, and the thief withdrew 
all their money. 



Why adopt the cloud? DATA WATCH 

What was the reason your organization adopted cloud computing? 



52% 


A need to cut costs 




Budget issues created the need 
to find cheaper alternatives 


19% 


To quickly implement new business 
processes 


13% A lack of in-house skill sets 


33% 


To improve overall business 
operating environment 



Why do enterprises care about the cloud? It's a matter of economics, not technology. More 
than 50% of organizations said cloud computing can help them save money, according to 
an IDC study. Nearly 700 IT executives participated in the project, which asked what drove 
their organization to look toward the clouds. 

Source: IDC 



Also, a study conducted by an end- 
point data protection company Credant 
Technologies found that 80% of mobile 
phone users store very sensitive informa- 
tion on their phones. According to the 
study, 16% have bank account details 
saved to their phones, and 24% save PIN 
numbers and passwords. This goes with- 
out saying, but be very careful with what 
you store on those mobile devices of 
yours; it can end up in the wrong hands. 
— Jeff Feinman 

LEVERAGED DEVELOPMENT: anoth- 
er term for describing picking up pieces 
and parts where you can and rolling 
them into software projects. This is what 
Mike Munger, manager of component 
development at InfoPrint (a joint IBM- 
Ricoh venture), described to me when 
discussing how his team works. 

With the economy forcing companies 
to essentially do more with less, Munger s 
team uses agile techniques, open-source 
software and integration to gain efficien- 
cies. They support five major operating 
systems, and would need a much larger 
workforce if they had to build everyting 
themselves. 

When the economy goes south, the 
leveraged development model becomes 
even more desired, according to 
Munger. But when you do component 
development, or leveraged develop- 
ment, a key piece is having confidence 
that the developers 
have revealed every- 
thing in the code. 
When offices are 
geographically dis- 
persed, and where 
the cultures and legal 
systems are different, 
it's critical to maintain confidence that 
what you're delivering to customers 
meets service-level agreements and 
won't violate some software license. 

Without an automation tool to do 
that, researching the components being 
used can take months, Munger said. 
With tools — Munger said his company 
uses Black Duck software to find com- 
ponents and check licenses — the 
process is easier and time is saved. And 
an informal standardization for compo- 
nent reuse is achieved. 

— David Rubinstein 

NOW TOMTOM IS SUING Microsoft 
back, alleging that the software giant 
violated some of its patents as well. The 
legal battle between those two compa- 
nies reflects the suit/countersuit mental- 
ity that exploits the patent system. These 
lawsuits clog up the courts and stifle 
innovation. 

The bar needs to be raised on patent 
quality, and while the courts are making 
some important decisions, Congress 
must also act to reform patent laws. 
Though the legislative process takes 
time, one thing is for certain: the sooner 
these laws are reformed, the better. 

— David Worthington 
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Haskell: It's like Klingon, but with math! 



a I might as well be looking at Klingon 
I script," said a colleague when we 
were discussing Haskell, the much- 
admired programming language. Read- 
ing Haskell requires more than a casu- 
al acquaintance with the language, due 
to a programming idiom that empha- 
sizes dense (or, if you prefer, concise) 
expressions, as well as Haskell's syntax, 
which is not part of the ubiquitous C 
language family. ("What? The return 
type is not the first thing in a function 
declaration?") 

"Real World Haskell," which recent- 
ly won a Jolt Award as the year's best 
technical book, does an excellent job 
preparing the newcomer not only to 
Haskell's syntax, but also to the lan- 
guage's selling propositions, which are 
a strong type system and the ability to 
program without side effects in the 
functional style. 

Like Smalltalk and LISP, it is a lan- 
guage that will almost certainly broad- 
en your approach to solving problems 
even if you do not have the chance to 
program in the language professionally. 
(On the other hand, I've heard it 
claimed that experts in the non-main- 
stream languages have a relatively easy 



time navigating between jobs in their 
more specialized communities.) 

The book, by Bryan O'Sullivan, 
John Goerzen and Don Stewart, jumps 
right into Haskell's type system. It cor- 
rectly states that one reason why type 
systems are so talked about is that a 
type system "deeply colors the way we 
think and write code in that 
language." 

There is, in my opinion, 
no hard-and-fast "correct" 
type system, and that is one 
reason why I don't feel hypo- 
critical recommending learn- 
ing Haskell just a few 
columns after recommend- 
ing learning Python, whose 
"duck typing" philosophy is 
pretty much antithetical to 
Haskell's. 

The short version of how these 
philosophies clash is whether a mis- 
match (say, passing an integer to a 
function that expects to manipulate a 
distinct "time" object) is detected at 
compile time or at runtime. I think 
there's more to the debate than that, 
and the real question is whether explic- 
itly answering "What have we here?" 



and "What sort of thing are we going to 
produce?" is a central or a secondary 
part of problem solving. It seems to me 
that there's a good case to be made that 
it's central. 

I think that this is especially true 
when one considers side effects, which 
is the somewhat confusing name for 
everything that actually 
makes a difference to the 
end user. Generally, in a 
functional program, you 
concentrate on producing a 
single value that is the result 
of a calculation on your 
. I input parameters, and gen- 

^£f ^ erally, if you send in the 
same input parameters, you 
expect to get the same out- 
put. A side effect is anything 
that makes the calculation deviate from 
that expectation: obvious things like 
debiting a credit card or sending out e- 
mail, but also work-a-day things like 
changing the value of a variable that is 
not explicitly passed in or out. 

To me, this emphasis on "a place for 
your stuff is the big advantage of func- 
tional programming. Haskell does a 
great job of enforcing discipline when 




Larry 
O'Brien 



it comes to side effects. When you pro- 
gram in Haskell, you really do feel that 
you are working on a nice, isolated 
component. 

This straightforward model is mar- 
ried to powerful abstractions, though. 
Learning Haskell can definitely be 
draining as you try to follow the point of 
some complex abstraction of a function 
that returns functions that work on 
functions of the type passed in to the 
first function... Complex Haskell can 
have all the brain-twisting complexity 
of void pointers, but with added mathe- 
matical rigor. 

O'Sullivan et al. do a superb job of 
jumping right into the "why" of Haskell 
and, joy of joys, the first function writ- 
ten does not output "Hello, World." By 
the middle of the book, they return to 
familiar tasks, such as database manip- 
ulation, a podcast aggregator and GUI 
programming. By the end of the book, 
they're dealing with such interesting 
topics as concurrency in general and 
software transactional memory in par- 
ticular. 

I do not know if learning Haskell will 
get you a job. I know it will make you a 
better software developer. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his hlog at 
www. knowing, net. 
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ECLIPSECON: COMMUNITY COMES TOGETHER 



BY ALEX HANDY 

The Eclipse community gathered last month 
in Santa Clara to discuss the future, celebrate 
the past, and generally talk about complex 
programming challenges. This year's event 
also marked the 10th anniversary of the for- 
mation of the OSGi Alliance. The annual con- 
fab is one of the few times during the year 
where members of Eclipse, who are scattered 
around the world, can meet face to face. 
Clockwise from near right: Eclipse Foundation 
executive director Mike Milinkovich finds a moment 
to relax during the conference; Foundation market- 
ing director Ian Skerritt shares a moment with 
Mike Taylor of Instantiations and a member of the 
Eclipse board; Paul Webster of IBM, who won the 
award for Top Contributor to Eclipse; Todd Williams, 
Jens Eckels and Wayne Parrott of MyEclipse 
maker Genuitec pose with the Mike Milinkovich 
bobblehead doll. (He's over Williams' shoulder.) 
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BUSINESS BRIEFS 



BORLAND SEES A BIG DIP 
IN 2008 EARNINGS 

Borland Software reported that its revenues fell by nearly US$100 million 
in 2008 from the prior year. 

The company reported total revenue for 2008 of $172 million, in com- 
parison to total revenue of $268.8 million in 2007. This excludes revenue 
from CodeGear, which the company reported as part of discontinued oper- 
ations. CodeGear was sold to Embarcadero in May 2008. 

Revenue for ALM products and services for the full year 2008 was $129 
million, compared to $211.8 million through 2007 in both ALM and deploy- 
ment products. At the beginning of the year, management expected total 
revenue for 2008 to be in the range of $235 million to $255 million. 

"Realistically, 2008 was a very difficult year for Borland," said Erik 
Prusch, acting president and CEO. "We experienced significant revenue 
declines, which necessitated several organizational restructurings, and we 
did not achieve our key objectives. The combination of poor execution, the 
changes we made to our operations, and the economic environment caused 
entirely too much disruption for our business." 

Borland reported a GAAP net loss of $215.7 million for the year, which 
included $184.6 million in non-cash goodwill impairment charges. 

Fourth-guarter 2008 revenue was $39.8 million, consisting of $29.2 mil- 
lion from ALM-related products. This compares to total revenue of $44.6 
million in the same quarter a year before, in which $35.7 million came from 
ALM products. I 



Imaging SDK provider Pegasus Imaging rebranded itself 
Accusoft Pegasus as a result of its combination with 
Accusoft, which is also an imaging company. Pegasus 
acquired Accusoft in December 2008, and has also pur- 
chased two additional properties in Tampa Bay, Fla., 
where Accusoft Pegasus' headquarters are located. 
Company executives said that Accusoft Pegasus is also 
accelerating research and development efforts as well 
as increasing hiring . . . Oracle announced that it has 
agreed to acquire Relsys, a provider of risk manage- 
ment and analytics applications for the health science 
industry. Oracle executives said that the combination of 
Relsys and Oracle's suite of health science products is 
aimed at helping customers to identify safety risks ear- 
lier in the development cycle and to track product per- 
formance. Financial terms of the deal were not dis- 
closed. 

EARNINGS: Red Hat reported total annual revenue for 
its fiscal year, ending Feb. 28, 2009, of US$652.6 million, 
an increase of 25% over the prior year. Total revenue for 
its fiscal fourth quarter was $166.2 million, an increase of 
18% from the same quarter a year ago and 1% from the 
prior quarter. I 
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MySQL Conference 
and Expo 

Santa Clara 
O'REILLY MEDIA 

www.mysqlconf.com 



April 20-23 



RSA Conference 


April 20-24 


San Francisco 




RSA 




365.rsaconference.com 




RailsConf 


May 4-7 


Las Vegas, 




O'REILLY MEDIA 




en.oreilly.com/rails2009 




Micro Focus World 


May 11-13 


Dallas 




MICRO FOCUS 
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Microsoft TechEd 


May 11-15 


Los Angeles 




MICROSOFT 
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IBM Rational Software May3i-June4 
Developer Conf. 

Orlando 
IBM 

www-01.ibm.com/software/rational/rsdc 



JavaOne 

San Francisco 

SUN MICROSYSTEMS 

java.sun.com/javaone 



June 2-5 



iPhone Developer Summit June 22 

New York 
SYS-CON 

www.iphonedevsummit.com 



AJAXWorld/SOAWorld 
Conference & Expo 

New York 
SYS-CON 

ajaxworld.com 



June 22 



SP Tech Con Boston 

Boston 
BZ MEDIA 

sptechcon.com 



June 22-24 



For a more complete calendar of U.S. software 
development events, see www.sdtimes.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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Get the richest set of controls in one great suite. 
Studio Enterprise 2009 will amaze you with 
enhanced performance and presentation. 
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TRY IT FREE ONLINE @ 
labs.componentone.com 




NEW Studio for Silverlight 

• Add style to your Ul with built-in support for the most popular 
Microsoft Silverlight Toolkit themes 

• Create graphical navigation with 3D effects using the new 
CI CoverFlow control 

• Import and export RTF files with CI RichTextBox 

• Get ahead of the pack with access to the best resources, including 
20+ samples with source code for quick learning & online forums 



NEWStudioforASP.NET 

• Experience more interaction on the client-side with new 
lightweight, high-performance controls 

• Create themed and animated apps using dozens of built-in 
styles & effects 

• Eliminate the learning curve with new CIGridView control that 
mimics the Microsoft ASP.NET GridView control with added 
features like row filtering, virtual scrolling & more 



NEW Studio for iPhone 

• Develop Web apps that look and feel like the iPhone and iPod 
touch native Uls using a wide range of unique ASP.NET control" 
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GET STARTED TODAY • DOWNLOAD YOUR FREE TRI/ 
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© 1987-2009 ComponentOne. All rights 
reserved. iPhone and iPod are trademarks of 
Apple Inc. All other product and brand names are 
trademarks and/or registered trademarks of their 
respective holders. 
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Sales: 1 .800.858.2739 or 1 .41 2.681 .4343 



Advanced Digital Dashboards Require 
Advanced Data Visualization 
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Available for Visual Studio 2008 & SQL Server 2008 Reporting Services 

Build Custom Executive Dashboards With Data Visualization Solutions From Dundas! 

As the leader in data visualization solutions for .NET, SharePoint 2007 and SQL Server Reporting Services 2005 & 2008, Dundas offers the latest 
award-winning chart, gauge and map technologies. See why Fortune 500 companies around the globe trust Dundas to create advanced custom 
dashboard applications. 

For customers requiring additional assistance, Dundas Consulting offers unmatched expertise and experience in creating and optimizing digital 
dashboards and their supporting infrastructure. Our team of highly specialized software consultants and graphic artists can help you jump start 
your dashboard initiative, build your complete system or simply advise you on all the tasks associated with bringing a dashboard system to life. 

To see for yourself how Dundas products can improve your applications, download full evaluation copies of Dundas Chart, Gauge and Map from 
www.dundas.com/downloads. 
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Available for: 



SharePoint 2007 



.NET 



Microsoft I 

SQL Server Reporting Services Data Management Solutions 

Partner 



www.dundas.com 

Microsoft, SharePoint, SQL Server and Visual Studio are registered trademarks of Microsoft Corporation in the United States and/or other countries 



www.dundas.com 
info@dundas.com 
(416)467-5100 



Advanced Data Visualization for Microsoft® Technologies 



